REPORT: Under Pressure, Western Tech Firms Share Cyber Secrets With Russia
Western technology companies, including Cisco, IBM and SAP, are acceding to demands by Moscow for access to closely guarded product security secrets, at a time when Russia has been accused of a growing number of cyber attacks on the West, a Reuters investigation has found.
Russian authorities are asking Western tech companies to allow them to review source code for security products such as firewalls, anti-virus applications and software containing encryption before permitting the products to be imported and sold in the country. The requests, which have increased since 2014, are ostensibly done to ensure foreign spy agencies have not hidden any “backdoors” that would allow them to burrow into Russian systems.
But those inspections also provide the Russians an opportunity to find vulnerabilities in the products’ source code - instructions that control the basic operations of computer equipment - current and former U.S. officials and security experts said.
While a number of U.S. firms say they are playing ball to preserve their entree to Russia’s huge tech market, at least one U.S. firm, Symantec, told Reuters it has stopped cooperating with the source code reviews over security concerns. That halt has not been previously reported.
Symantec said one of the labs inspecting its products was not independent enough from the Russian government.
http://www.huffingtonpost.com/entry/russia-tech-cyber-secrets_us_594da451e4b02734df2a83a2?5a22&ncid=inblnkushpmg00000009
